GHSA-8m9v-xpgf-g99m OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization
Unauthorized senders can bypass authorization checks to disrupt sessions and view sensitive model metadata in OpenClaw.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-8m9v-xpgf-g99m?
GHSA-8m9v-xpgf-g99m is a missing authorization vulnerability in openclaw, published on 2 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Summary
Unauthorized senders could trigger two command paths without sender authorization checks:
- stop-like natural-language abort triggers
/modelscommand output
Impact
An unauthorized sender could disrupt active sessions and view model/auth metadata that should be authorization-gated.
Fix
Sender authorization is now enforced for stop-like abort triggers and /models listings.
Affected and Patched Versions
- Affected:
<= 2026.2.26 - Patched:
2026.3.1
Which versions are affected by GHSA-8m9v-xpgf-g99m?
2 open source packages ship an affected version, including openclaw.
| Package | Affected | Fixed in |
|---|---|---|
openclaw npm | All versions | 2026.3.1 |
openclaw npm | All versions | 2026.3.1 |
How do I fix GHSA-8m9v-xpgf-g99m?
Upgrade openclaw to 2026.3.1 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is GHSA-8m9v-xpgf-g99m being exploited?
There is no known exploitation of GHSA-8m9v-xpgf-g99m in the wild and no public exploit code.